cbcvebase.

Ini Project Ini vulnerabilities

1 known vulnerability affecting ini_project/ini.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-7788P3CRITICALCVSS 9.8fixed in 1.3.6≥ unspecified, < 1.3.62020-12-11
CVE-2020-7788 [CRITICAL] CWE-1321 CVE-2020-7788: This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an applica This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
ghsanvdosv
Ini Project Ini vulnerabilities | cvebase